TOOLS / KEY MANAGEMENT

Key Derivation

Derive keys using PBKDF2 and HKDF.

Algorithm

Spaces accepted. Blank means an empty salt.

Hash algorithm

Calculator reference

Verification evidence and limitations →

What it calculates

Derives output bytes from input key material using PBKDF2 or HKDF.

Inputs and methods

HEX or ASCII input, HEX salt, SHA-256/384/512, output length; PBKDF2 iterations or HKDF info.

Worked example

PBKDF2, SHA-256, ASCII password, salt HEX 73616C74, 2 iterations, 32 bytes.

AE4D0C95AF6B46D32D0ADFF928F06DD02A303F8EF3C251DFD6E2D85A95474C43

Specification and limits

The two-iteration example is for reproducibility, not password protection. HKDF is not password stretching.

RFC 8018 ↗